Using Clear Text Authentication

[David Morgan]

Hi

Although I have been working with ASP for a number of years now, I have
always used form/database based login mechanisms. The time has now come
where I need to use the old Login Dialog box. I have read various articles
about Basic Authentication etc. but I have a couple of questions:

1) User credentials are stored in the same place as Administrator etc. This
means that if a webserver is hosting multiple websites, user names will need
to be unique across all of them, right?

2) You add users/change passwords/check details etc using ADSI from your ASP
Page using a container for an administrative user, right?

3) The URL to the secured content should be accessed via HTTPS to ensure
that the login credentials that will be requested are submitted via HTTPS?

I am asking these questions as it seems a shame to clutter up the W2K
user/groups areas with potentially thousands of user accounts and usernames
can only be used once per machine rather than once per website.

Any help with these matters would be gratefully appreciated.

Regards

David

[Tom Kaminski [MVP]]

"David Morgan" <david@davidmorgan.me.uk> wrote in message
news:OZrx8Zm6DHA.1816@TK2MSFTNGP12.phx.gbl...

> Hi
>
> Although I have been working with ASP for a number of years now, I have
> always used form/database based login mechanisms. The time has now come
> where I need to use the old Login Dialog box. I have read various

articles

> about Basic Authentication etc. but I have a couple of questions:
>
> 1) User credentials are stored in the same place as Administrator etc.

This

> means that if a webserver is hosting multiple websites, user names will

need

> to be unique across all of them, right?

Yes.

> 2) You add users/change passwords/check details etc using ADSI from your

ASP

> Page using a container for an administrative user, right?

Yes.

> 3) The URL to the secured content should be accessed via HTTPS to ensure
> that the login credentials that will be requested are submitted via HTTPS?

Yes.

--
Tom Kaminski IIS MVP
[url]http://www.iistoolshed.com/[/url] - tools, scripts, and utilities for running IIS
[url]http://mvp.support.microsoft.com/[/url]
[url]http://www.microsoft.com/windowsserver2003/community/centers/iis/[/url]